RE: NBAR on Fastethernet

From: Victor Cappuccio (victor@ccbootcamp.com)
Date: Thu Feb 15 2007 - 13:18:43 ART


Hi Allan, is working fine for me!

R1(config)#ip cef
R1(config)#
R1(config)#class-map match-all HTTP
R1(config-cmap)# match protocol http
R1(config-cmap)#class-map match-any FTP
R1(config-cmap)# match protocol ftp
R1(config-cmap)#
R1(config-cmap)#policy-map QoS_OUT_F0/0
R1(config-pmap)#
R1(config-pmap)#class FTP
R1(config-pmap-c)# police 10000 conform-action transmit exceed-action
drop
R1(config-pmap-c-police)# class HTTP
R1(config-pmap-c)# police 20000 conform-action transmit exceed-action
drop
R1(config-pmap-c-police)#
R1(config-pmap-c-police)#exit
R1(config-pmap-c)#int f0/0
R1(config-if)#ser in QoS_OUT_F0/0
R1(config-if)#! Did you tried to change the service policy application
direction?

Verification:

R1#copy http://7.7.7.7/Conf.html null:
Loading http://7.7.7.7/Conf.html !
1317 bytes copied in 1.420 secs (927 bytes/sec)
R1#show policy-map int f0/0
 FastEthernet0/0

  Service-policy input: QoS_OUT_F0/0

    Class-map: FTP (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol ftp
        0 packets, 0 bytes
        5 minute rate 0 bps
      police:
          cir 10000 bps, bc 1500 bytes
        conformed 0 packets, 0 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        conformed 0 bps, exceed 0 bps

***************************************************************
* Class-map: HTTP (match-all) *
* 20 packets, 3786 bytes *
* 5 minute offered rate 1000 bps, drop rate 0 bps *
* Match: protocol http *
* police: *
* cir 20000 bps, bc 1500 bytes *
* conformed 19 packets, 3219 bytes; actions: *
* transmit *

* exceeded 1 packets, 567 bytes; actions: *
* drop *

* conformed 0 bps, exceed 0 bps *
* *
***************************************************************
    Class-map: class-default (match-any)
      41 packets, 3094 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: any
R1#

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hs
ec_c/part15/ch05/h_fwapc.htm

Nbar is kind of funny, it takes the HTTP outgoing request, and it
interprets the returned traffic.

Thanks,
Victor Cappuccio.
Network Learning Inc - A Cisco Sponsored Organization (SO) YES! We take
Cisco Learning credits!
mailto:brad@ccbootcamp.com
http://www.ccbootcamp.com (Cisco Training and Rental Racks)
http://www.ccbootcamp.com/groupstudy.html (groupstudy member discounts!)
Voice: 702-968-5100
FAX: 702-446-8012

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Allan
Sent: Thursday, February 15, 2007 12:02 AM
To: ccielab@groupstudy.com
Subject: NBAR on Fastethernet
Importance: Low

Hi

If NBAR does not work on the fast ethernet, I did the same policy apply
to
fa0/0 and s0/0 on a same router, fastethernet can' t policy the traffic.
any idea ?

ip cef

class-map match-all HTTP
  match protocol http
class-map match-any FTP
  match protocol ftp

policy-map QoS_OUT_F0/0

class FTP
   police 10000 conform-action transmit exceed-action drop
  class HTTP
   police 20000 conform-action transmit exceed-action drop

 policy-map QoS_OUT_S0/0

class FTP
   police 10000 conform-action transmit exceed-action drop
  class HTTP
   police 20000 conform-action transmit exceed-action drop

------------------------------------------>> apply to S0/0

R3#copy ftp: null:
Address or name of remote host [1.1.5.5]?
Source filename [P00307020400.bin]?
Accessing ftp://1.1.5.5/P00307020400.bin...
Loading P00307020400.bin !!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 129476/4096 bytes]

sh policy-map interface

Serial0/0

Service-policy output: QoS_OUT_S0/0
Class-map: FTP (match-any)
      712 packets, 32040 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol ftp
        712 packets, 32040 bytes
        5 minute rate 0 bps
      police:
          cir 10000 bps, bc 1500 bytes
        conformed 712 packets, 32040 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        conformed 0 bps, exceed 0 bps

------------------------------------->>> apply to F0/0
sh policy-map interface

FastEthernet0/0

  Service-policy output: QoS_OUT_F0/0

    Class-map: FTP (match-any)
      0 packets, 0 bytes
      5 minute offered rate 0 bps, drop rate 0 bps
      Match: protocol ftp
        0 packets, 0 bytes
        5 minute rate 0 bps
      police:
          cir 10000 bps, bc 1500 bytes
        conformed 0 packets, 0 bytes; actions:
          transmit
        exceeded 0 packets, 0 bytes; actions:
          drop
        conformed 0 bps, exceed 0 bps



This archive was generated by hypermail 2.1.4 : Thu Mar 01 2007 - 07:38:46 ART